Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
File: c2MktbTBPXYGw5LDdONbvmSiTlA.cer (raw, json)
Hash identifier: 9sOR+W+zB9DyVxTnNSzRcCVeeRHns/NmRtqVJtomTh8=
Subject key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AB8049ECB0C53D4E0B672F88D51E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.36.96.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b8:04:9e:cb:0c:53:d4:e0:b6:72:f8:8d:51:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:91:3e:b3:9e:cc:31:fb:2d:81:06:ef:ab:
96:34:2f:38:44:d5:20:21:19:a7:36:b7:e8:49:0d:
28:6b:6a:86:cc:d8:66:0a:67:96:8e:53:c2:88:70:
61:95:cb:a3:98:5d:b6:89:0e:64:54:1b:49:84:f5:
d2:14:38:f8:41:4f:0e:6f:74:cd:9d:ba:b4:e6:5d:
0d:22:c0:3e:25:80:de:83:58:bf:28:9f:7d:4e:a0:
3c:59:f3:d2:b1:79:c3:e2:c3:13:77:e9:27:00:ff:
d9:78:c6:f3:40:17:fe:12:65:4f:52:ef:32:67:b2:
a9:db:e8:29:0e:15:1c:04:19:bc:94:8f:d7:90:78:
67:e4:ca:6d:95:a3:a7:a7:08:5a:7d:66:02:26:19:
34:24:1f:8b:33:00:7e:0e:77:74:e4:95:42:f7:20:
58:d4:e3:46:14:24:5a:d2:18:e2:f3:62:e7:0f:16:
ad:68:57:c6:5b:7c:d1:0e:e0:43:f1:50:ff:cd:cf:
8e:17:ee:be:96:db:96:93:df:a9:4b:53:aa:33:22:
f1:a5:4d:df:50:6b:a0:50:ba:38:89:f2:16:0c:8b:
43:d0:9b:30:62:4a:fe:59:c5:aa:03:96:8a:55:7e:
35:b3:7d:1e:18:80:ed:a8:ec:b1:5f:96:4b:96:1c:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.96.0/19
Signature Algorithm: sha256WithRSAEncryption
31:c5:dc:a7:01:53:8e:ee:0c:45:f1:a0:c2:d4:90:2a:dc:30:
b9:bb:fd:6f:12:36:02:cb:8d:5c:27:d2:fa:d9:7e:e3:b6:33:
93:5f:9d:73:69:2f:5d:b1:48:c3:91:e6:ee:40:12:9c:fc:d9:
49:7d:54:94:47:ec:74:53:4c:93:e6:ac:75:57:ec:d7:42:1d:
d0:0a:f0:7b:ca:b9:33:1d:4f:fe:99:77:6c:32:da:b5:a7:f0:
7e:4d:9d:84:e5:9d:2b:98:c9:e2:97:2f:28:a8:6a:2b:dc:19:
b9:04:60:79:f5:7e:56:66:0f:5e:b2:68:4b:bc:4e:6a:03:0e:
a0:14:88:a8:9b:cc:2e:0e:bd:ee:47:c7:c3:f8:7d:6c:a2:9d:
93:d9:6f:e7:ec:00:33:bd:2b:ce:a7:a4:c9:e0:09:6f:ac:10:
d8:82:41:be:5f:f0:09:0e:20:d9:9b:b3:ea:4e:d0:38:83:f2:
4e:9c:95:c3:e4:3b:a7:be:61:6c:f8:b4:dc:e6:36:fe:e4:b6:
9e:c9:35:23:8f:e9:cf:f1:47:b2:2e:a4:4d:0a:f5:44:a6:58:
d5:fa:08:d4:01:d5:1d:0e:77:4f:50:b8:69:04:38:ff:28:93:
85:3b:c3:27:01:6b:88:01:26:57:37:11:1d:10:04:83:27:b8:
91:b7:dd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:17:15 2024 by rpki-client on console-fra.rpki-client.org